Capsule Safe
The vault even we can't open.
Full local encryption. Zero keys on server. Zero metadata. Zero recovery path. Our server in Israel (GCP me-west1) stores only ciphertext — even Google can't read it. This isn't policy. This is architecture.
Not everyone needs this vault. Those who do — have no alternative.
Attorney-client privilege. Investigation files, contracts, plea deals. Leaked docs = case collapse.
Patient Rights Law. Medical records, test results, treatment summaries. Protecting the most private.
Financial reports, payslips, capital declarations. Amendment 13 mandates PII protection in transit.
API keys, server passwords, seed phrases, cloud credentials. One leaked secret = breach.
BOI Directive 364. Financial data, loans, claims. Regulation demands encryption.
Seed phrases, private keys, wallets. No "forgot password". The only vault that fits.
Amendment 13 + Israeli Server + Zero-Knowledge
Amendment 13 to the Privacy Protection Law (August 2025) requires every organization holding PII to protect it with encryption, report breaches within 72 hours, and appoint a DPO. Capsule Safe doesn't just comply — it makes the requirements irrelevant.
GCP me-west1 (Tel Aviv). Data never leaves Israel. Full data sovereignty.
Encryption happens on your device before upload. Google stores ciphertext only. They have no key.
Amendment 13, GDPR, attorney-client privilege, Patient Rights Law, Directive 364. No data = no breach = no fine.
In most vaults, protection is policy — "we won't read your data". In Capsule Safe, protection is architecture — we can't read it even if we wanted to. Not even with a court order.
How Capsule Safe Works
[Your Device]
├── Seed Phrase (12 words) → PBKDF2 (600,000 iterations) → Master Key
├── Entry: { label, user, pass, url, notes, files }
│ └── AES-256-GCM encrypt (locally, before upload)
│ └── Encrypted Blob (only this leaves your device)
│
└── Upload to Capsule Safe Server (GCP me-west1, Israel)
│
Server stores: { encrypted_blob, iv, hash }
Server CANNOT: decrypt, read, index, search
Server KNOWS: nothing about you
Google KNOWS: nothing (ciphertext only)
Court order: nothing to hand over
Breach: worthless ciphertextWhy This Vault is First of Its Kind
The technologies exist. The combination — doesn't.
Pricing
Ephemeral messages — free. Permanent vault — paid. Your secrets are worth more than a subscription.
After trial: 30-day grace period (read-only). After 60 days — vault deleted. Consistent with our philosophy: data doesn't persist without intent.
Choose Nickname + PIN Code
Your Capsule Safe identity is anonymous. Nickname + 4 digits. No name, no email, no phone. Your PIN = your access.
No signup. No email. Your nickname and PIN are all you need. Cannot be recovered — keep them safe.
Nobody can get in.
No keys on server. No backdoor. No recovery mechanism. Keys are created on your device and stay there. AES-256-GCM + PBKDF2 with 600,000 iterations = billions of years to crack.